evilcode.win - robtex.com
evilcode.win
| DNSSEC | β οΈ Not signed | ||||||
| A | 2606:4700:3034::6815:4613πΊπΈ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 2606:4700:3037::ac43:d9eeπΊπΈ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 104.21.70.19Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 172.67.217.238πΊπΈ Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| NS | bowen.ns.cloudflare.com β | ||||||
| A | 2606:4700:58::a29f:2c53πΊπΈ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | bowen.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c353π¨π· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | bowen.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:2353πΊπΈ Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | bowen.ns.cloudflare.com | ||||||
| A | 108.162.195.83πΊπΈ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | bowen.ns.cloudflare.com | ||||||
| A | 162.159.44.83Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | bowen.ns.cloudflare.com | ||||||
| A | 172.64.35.83πΊπΈ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | bowen.ns.cloudflare.com | ||||||
| NS | nucum.ns.cloudflare.com | ||||||
| A | 2606:4700:50::a29f:2691πΊπΈ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | nucum.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c291π¨π· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | nucum.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:2291πΊπΈ Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | nucum.ns.cloudflare.com | ||||||
| A | 108.162.194.145πΊπΈ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | nucum.ns.cloudflare.com | ||||||
| A | 162.159.38.145Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | nucum.ns.cloudflare.com | ||||||
| A | 172.64.34.145πΊπΈ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | nucum.ns.cloudflare.com | ||||||
| MX | mx2.zoho.eu β | ||||||
| A | 185.230.214.166π³π± ZOHO-EU185.230.214.0/23 | ||||||
| PTR | mx2.zoho.eu | ||||||
| PTR | mx3.zoho.eu | ||||||
| PTR | mx.zoho.eu | ||||||
| MX | mx3.zoho.eu(20) | ||||||
| A | 185.230.212.166π³π± ZOHO-EU185.230.212.0/23 | ||||||
| PTR | mx2.zoho.eu | ||||||
| PTR | mx3.zoho.eu | ||||||
| PTR | mx.zoho.eu | ||||||
| MX | mx.zoho.eu(50) | ||||||
| A | 185.230.212.166π³π± ZOHO-EU185.230.212.0/23 | ||||||
| PTR | mx2.zoho.eu | ||||||
| PTR | mx3.zoho.eu | ||||||
| PTR | mx.zoho.eu | ||||||
| A | 185.230.214.166π³π± ZOHO-EU185.230.214.0/23 | ||||||
| PTR | mx2.zoho.eu | ||||||
| PTR | mx3.zoho.eu | ||||||
| PTR | mx.zoho.eu | ||||||
| TXT | v=spf1 include:zoho.eu ~all | ||||||
| HTTPS | HTTP/3, HTTP/2 β hints match | ||||||
| IPv4 hints | 104.21.70.19, 172.67.217.238 | ||||||
| IPv6 hints | 2606:4700:3034::6815:4613, 2606:4700:3037::ac43:d9ee | ||||||
| ECH | X25519, HKDF-SHA256 + AES-128-GCM draft, id=208, name=cloudflare-ech.com | ||||||
| SOA | bowen.ns.cloudflare.comdns@cloudflare.com serial=2415898619 | ||||||
win
| DNSSEC | π Signed (DS record present) | ||||||
| NS | ns1.dns.nic.win β | ||||||
| NS | a.nic.win | ||||||
| NS | b.nic.win | ||||||
| NS | c.nic.win | ||||||
| NS | ns2.dns.nic.win | ||||||
| NS | ns3.dns.nic.win | ||||||
| SOA | ns1.dns.nic.winadmin@tldns.godaddy serial=1790798554 | ||||||
Same first word
evilcode.club |
evilcode.uber.space |
evilcode.uk |
evilcode.workers.dev |
evilcode.cn |
evilcode.web.id |
evilcode.net |
evilcode.xyz |
evilcode.com |
evilcode.win |
Similar names
Previous names
Next names
DNS History
9 records (9 active, 0 former)
βNSbowen.ns.cloudflare.com2026-09-26 β 2026-09-30 Β· 2 obs
β 2026-09-30 20:38:32
βNSnucum.ns.cloudflare.com2026-09-26 β 2026-09-30 Β· 2 obs
β 2026-09-30 20:38:32
βA104.21.70.192026-09-26 β 2026-09-30 Β· 2 obs
β 2026-09-30 20:38:32
βA172.67.217.2382026-09-26 β 2026-09-30 Β· 2 obs
β 2026-09-30 20:38:32
βA2606:4700:3034::6815:46132026-09-26 β 2026-09-30 Β· 2 obs
β 2026-09-30 20:38:32
βA2606:4700:3037::ac43:d9ee2026-09-26 β 2026-09-30 Β· 2 obs
β 2026-09-30 20:38:32
π DNS Trace
π Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| win | c.nic.win, ns1.dns.nic.win, a.nic.win, ns3.dns.nic.win... | - |
| evilcode.win | nucum.ns.cloudflare.com, bowen.ns.cloudflare.com | - |
β Authoritative Response
Server:162.159.44.83
NS records: nucum.ns.cloudflare.com, bowen.ns.cloudflare.com
π DNSSEC Status
β οΈ Insecure (no DNSSEC)
No DS record for evilcode.win (unsigned zone)
β±οΈ Timing
Total: 702ms | Queries: -
π Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 172.67.217.238, 104.21.70.19 |
| AAAA | 2 | 2606:4700:3037::ac43:d9ee, 2606:4700:3034::6815:4613 |
| NS | 2 | bowen.ns.cloudflare.com, nucum.ns.cloudflare.com |
| MX | 3 | mx.zoho.eu (pri: 10), mx2.zoho.eu (pri: 20)... |
| TXT | 1 | v=spf1 include:zoho.eu ~all |
| HTTPS | 1 | {"priority":1,"target":".","alpn":["h3", |
| SOA | 1 | bowen.ns.cloudflare.com dns.cloudflare.c |
Analysis
IP Addresses
evilcode.win directs to four IP numbers, which are 104.21.70.19, 172.67.217.238, 2606:4700:3034::6815:4613 and 2606:4700:3037::ac43:d9ee.
Two other host names, along with shreeruh.com, mashnlearn.com and dewi11jpex.site, also share IP numbers with evilcode.win.
Name Servers
Two name servers handle the delegation for evilcode.win: bowen.ns.cloudflare.com and nucum.ns.cloudflare.com.
evilcode.win shares its NS records with other domains, for example prestigecasino-uk.co.uk, x951.buzz, 8310w.pages.dev and two others.
At least some of evilcode.win's name servers are shared with other domains, for example dinerolistoglobal.com, storebeeper.com, gwpmozambique.org and two more.
These name servers tend to be deployed in combination with the name servers lloyd.ns.cloudflare.com and thaddeus.ns.cloudflare.com.
DNS names with 6 IP addresses:
bowen.ns.cloudflare.com resolves to 108.162.195.83, 162.159.44.83 and 172.64.35.83 among others, with 3 other IP addresses in total.
nucum.ns.cloudflare.com resolves to 108.162.194.145, 162.159.38.145 and 172.64.34.145 among others, with 3 other IP addresses in total.
Mail Servers
The MX records for evilcode.win list three mail servers: mx2.zoho.eu, mx3.zoho.eu and mx.zoho.eu.
There is at least a partial MX overlap between evilcode.win and other domains, including ngly.de, timzar.es, genelous.com and two others.
Host names that have two IP addresses:
mx.zoho.eu resolves to two addresses: 185.230.212.166 and 185.230.214.166.
Host names that point to one IP address:
The hostname mx2.zoho.eu resolves to 185.230.214.166.
The hostname mx3.zoho.eu resolves to 185.230.212.166.
mx.zoho.eu along with mx3.zoho.eu each resolve to 185.230.212.166 IP addresses.
mx.zoho.eu along with mx2.zoho.eu each resolve to 185.230.214.166 IP addresses.